com.pulumi.kubernetes.flowcontrol.v1beta1.kotlin.inputs.PolicyRulesWithSubjectsArgs.kt Maven / Gradle / Ivy

Go to download
Show more of this group Show more artifacts with this name
Show all versions of pulumi-kubernetes-kotlin Show documentation
Build cloud applications and infrastructure by combining the safety and reliability of infrastructure as code with the power of the Kotlin programming language.
There is a newer version: 4.18.2.0
Show newest version
@file:Suppress("NAME_SHADOWING", "DEPRECATION")

package com.pulumi.kubernetes.flowcontrol.v1beta1.kotlin.inputs

import com.pulumi.core.Output
import com.pulumi.core.Output.of
import com.pulumi.kotlin.ConvertibleToJava
import com.pulumi.kotlin.PulumiNullFieldException
import com.pulumi.kotlin.PulumiTagMarker
import com.pulumi.kotlin.applySuspend
import com.pulumi.kubernetes.flowcontrol.v1beta1.inputs.PolicyRulesWithSubjectsArgs.builder
import kotlin.Suppress
import kotlin.Unit
import kotlin.collections.List
import kotlin.jvm.JvmName

/**
 * PolicyRulesWithSubjects prescribes a test that applies to a request to an apiserver. The test considers the subject making the request, the verb being requested, and the resource to be acted upon. This PolicyRulesWithSubjects matches a request if and only if both (a) at least one member of subjects matches the request and (b) at least one member of resourceRules or nonResourceRules matches the request.
 * @property nonResourceRules `nonResourceRules` is a list of NonResourcePolicyRules that identify matching requests according to their verb and the target non-resource URL.
 * @property resourceRules `resourceRules` is a slice of ResourcePolicyRules that identify matching requests according to their verb and the target resource. At least one of `resourceRules` and `nonResourceRules` has to be non-empty.
 * @property subjects subjects is the list of normal user, serviceaccount, or group that this rule cares about. There must be at least one member in this slice. A slice that includes both the system:authenticated and system:unauthenticated user groups matches every request. Required.
 */
public data class PolicyRulesWithSubjectsArgs(
    public val nonResourceRules: Output>? = null,
    public val resourceRules: Output>? = null,
    public val subjects: Output>,
) : ConvertibleToJava {
    override fun toJava(): com.pulumi.kubernetes.flowcontrol.v1beta1.inputs.PolicyRulesWithSubjectsArgs =
        com.pulumi.kubernetes.flowcontrol.v1beta1.inputs.PolicyRulesWithSubjectsArgs.builder()
            .nonResourceRules(
                nonResourceRules?.applyValue({ args0 ->
                    args0.map({ args0 ->
                        args0.let({ args0 ->
                            args0.toJava()
                        })
                    })
                }),
            )
            .resourceRules(
                resourceRules?.applyValue({ args0 ->
                    args0.map({ args0 ->
                        args0.let({ args0 ->
                            args0.toJava()
                        })
                    })
                }),
            )
            .subjects(
                subjects.applyValue({ args0 ->
                    args0.map({ args0 ->
                        args0.let({ args0 ->
                            args0.toJava()
                        })
                    })
                }),
            ).build()
}

/**
 * Builder for [PolicyRulesWithSubjectsArgs].
 */
@PulumiTagMarker
public class PolicyRulesWithSubjectsArgsBuilder internal constructor() {
    private var nonResourceRules: Output>? = null

    private var resourceRules: Output>? = null

    private var subjects: Output>? = null

    /**
     * @param value `nonResourceRules` is a list of NonResourcePolicyRules that identify matching requests according to their verb and the target non-resource URL.
     */
    @JvmName("iowtftldjwjkdksh")
    public suspend fun nonResourceRules(`value`: Output>) {
        this.nonResourceRules = value
    }

    @JvmName("tobtuxrbpusrgnck")
    public suspend fun nonResourceRules(vararg values: Output) {
        this.nonResourceRules = Output.all(values.asList())
    }

    /**
     * @param values `nonResourceRules` is a list of NonResourcePolicyRules that identify matching requests according to their verb and the target non-resource URL.
     */
    @JvmName("baqucubyywpbcldh")
    public suspend fun nonResourceRules(values: List>) {
        this.nonResourceRules = Output.all(values)
    }

    /**
     * @param value `resourceRules` is a slice of ResourcePolicyRules that identify matching requests according to their verb and the target resource. At least one of `resourceRules` and `nonResourceRules` has to be non-empty.
     */
    @JvmName("skpwbkobhuatkyve")
    public suspend fun resourceRules(`value`: Output>) {
        this.resourceRules = value
    }

    @JvmName("rdxrnvwtxvcxcjad")
    public suspend fun resourceRules(vararg values: Output) {
        this.resourceRules = Output.all(values.asList())
    }

    /**
     * @param values `resourceRules` is a slice of ResourcePolicyRules that identify matching requests according to their verb and the target resource. At least one of `resourceRules` and `nonResourceRules` has to be non-empty.
     */
    @JvmName("xngrnokugiejgchm")
    public suspend fun resourceRules(values: List>) {
        this.resourceRules = Output.all(values)
    }

    /**
     * @param value subjects is the list of normal user, serviceaccount, or group that this rule cares about. There must be at least one member in this slice. A slice that includes both the system:authenticated and system:unauthenticated user groups matches every request. Required.
     */
    @JvmName("jxjkweuecyklrril")
    public suspend fun subjects(`value`: Output>) {
        this.subjects = value
    }

    @JvmName("taajistqemoklwjy")
    public suspend fun subjects(vararg values: Output) {
        this.subjects = Output.all(values.asList())
    }

    /**
     * @param values subjects is the list of normal user, serviceaccount, or group that this rule cares about. There must be at least one member in this slice. A slice that includes both the system:authenticated and system:unauthenticated user groups matches every request. Required.
     */
    @JvmName("vhfplajwfduxykqw")
    public suspend fun subjects(values: List>) {
        this.subjects = Output.all(values)
    }

    /**
     * @param value `nonResourceRules` is a list of NonResourcePolicyRules that identify matching requests according to their verb and the target non-resource URL.
     */
    @JvmName("dfsvukfbngwkgjrg")
    public suspend fun nonResourceRules(`value`: List?) {
        val toBeMapped = value
        val mapped = toBeMapped?.let({ args0 -> of(args0) })
        this.nonResourceRules = mapped
    }

    /**
     * @param argument `nonResourceRules` is a list of NonResourcePolicyRules that identify matching requests according to their verb and the target non-resource URL.
     */
    @JvmName("imjhtywnvfffmbxd")
    public suspend fun nonResourceRules(argument: List Unit>) {
        val toBeMapped = argument.toList().map {
            NonResourcePolicyRuleArgsBuilder().applySuspend {
                it()
            }.build()
        }
        val mapped = of(toBeMapped)
        this.nonResourceRules = mapped
    }

    /**
     * @param argument `nonResourceRules` is a list of NonResourcePolicyRules that identify matching requests according to their verb and the target non-resource URL.
     */
    @JvmName("cpwtvhapaerbvlbc")
    public suspend fun nonResourceRules(vararg argument: suspend NonResourcePolicyRuleArgsBuilder.() -> Unit) {
        val toBeMapped = argument.toList().map {
            NonResourcePolicyRuleArgsBuilder().applySuspend {
                it()
            }.build()
        }
        val mapped = of(toBeMapped)
        this.nonResourceRules = mapped
    }

    /**
     * @param argument `nonResourceRules` is a list of NonResourcePolicyRules that identify matching requests according to their verb and the target non-resource URL.
     */
    @JvmName("eislvxcjefrhjeec")
    public suspend fun nonResourceRules(argument: suspend NonResourcePolicyRuleArgsBuilder.() -> Unit) {
        val toBeMapped = listOf(NonResourcePolicyRuleArgsBuilder().applySuspend { argument() }.build())
        val mapped = of(toBeMapped)
        this.nonResourceRules = mapped
    }

    /**
     * @param values `nonResourceRules` is a list of NonResourcePolicyRules that identify matching requests according to their verb and the target non-resource URL.
     */
    @JvmName("iesmytnkedjjxiny")
    public suspend fun nonResourceRules(vararg values: NonResourcePolicyRuleArgs) {
        val toBeMapped = values.toList()
        val mapped = toBeMapped.let({ args0 -> of(args0) })
        this.nonResourceRules = mapped
    }

    /**
     * @param value `resourceRules` is a slice of ResourcePolicyRules that identify matching requests according to their verb and the target resource. At least one of `resourceRules` and `nonResourceRules` has to be non-empty.
     */
    @JvmName("tfyikvtgcaeywffm")
    public suspend fun resourceRules(`value`: List?) {
        val toBeMapped = value
        val mapped = toBeMapped?.let({ args0 -> of(args0) })
        this.resourceRules = mapped
    }

    /**
     * @param argument `resourceRules` is a slice of ResourcePolicyRules that identify matching requests according to their verb and the target resource. At least one of `resourceRules` and `nonResourceRules` has to be non-empty.
     */
    @JvmName("okfvisprmivhnyot")
    public suspend fun resourceRules(argument: List Unit>) {
        val toBeMapped = argument.toList().map {
            ResourcePolicyRuleArgsBuilder().applySuspend {
                it()
            }.build()
        }
        val mapped = of(toBeMapped)
        this.resourceRules = mapped
    }

    /**
     * @param argument `resourceRules` is a slice of ResourcePolicyRules that identify matching requests according to their verb and the target resource. At least one of `resourceRules` and `nonResourceRules` has to be non-empty.
     */
    @JvmName("onbndednsindlmpj")
    public suspend fun resourceRules(vararg argument: suspend ResourcePolicyRuleArgsBuilder.() -> Unit) {
        val toBeMapped = argument.toList().map {
            ResourcePolicyRuleArgsBuilder().applySuspend {
                it()
            }.build()
        }
        val mapped = of(toBeMapped)
        this.resourceRules = mapped
    }

    /**
     * @param argument `resourceRules` is a slice of ResourcePolicyRules that identify matching requests according to their verb and the target resource. At least one of `resourceRules` and `nonResourceRules` has to be non-empty.
     */
    @JvmName("hvqyheqksvwxhbev")
    public suspend fun resourceRules(argument: suspend ResourcePolicyRuleArgsBuilder.() -> Unit) {
        val toBeMapped = listOf(ResourcePolicyRuleArgsBuilder().applySuspend { argument() }.build())
        val mapped = of(toBeMapped)
        this.resourceRules = mapped
    }

    /**
     * @param values `resourceRules` is a slice of ResourcePolicyRules that identify matching requests according to their verb and the target resource. At least one of `resourceRules` and `nonResourceRules` has to be non-empty.
     */
    @JvmName("ncfvnyappfvdbmmb")
    public suspend fun resourceRules(vararg values: ResourcePolicyRuleArgs) {
        val toBeMapped = values.toList()
        val mapped = toBeMapped.let({ args0 -> of(args0) })
        this.resourceRules = mapped
    }

    /**
     * @param value subjects is the list of normal user, serviceaccount, or group that this rule cares about. There must be at least one member in this slice. A slice that includes both the system:authenticated and system:unauthenticated user groups matches every request. Required.
     */
    @JvmName("depogwuwubrbujjw")
    public suspend fun subjects(`value`: List) {
        val toBeMapped = value
        val mapped = toBeMapped.let({ args0 -> of(args0) })
        this.subjects = mapped
    }

    /**
     * @param argument subjects is the list of normal user, serviceaccount, or group that this rule cares about. There must be at least one member in this slice. A slice that includes both the system:authenticated and system:unauthenticated user groups matches every request. Required.
     */
    @JvmName("smtivxkxpvcdpnju")
    public suspend fun subjects(argument: List Unit>) {
        val toBeMapped = argument.toList().map { SubjectArgsBuilder().applySuspend { it() }.build() }
        val mapped = of(toBeMapped)
        this.subjects = mapped
    }

    /**
     * @param argument subjects is the list of normal user, serviceaccount, or group that this rule cares about. There must be at least one member in this slice. A slice that includes both the system:authenticated and system:unauthenticated user groups matches every request. Required.
     */
    @JvmName("feudnvyskwqmohgl")
    public suspend fun subjects(vararg argument: suspend SubjectArgsBuilder.() -> Unit) {
        val toBeMapped = argument.toList().map { SubjectArgsBuilder().applySuspend { it() }.build() }
        val mapped = of(toBeMapped)
        this.subjects = mapped
    }

    /**
     * @param argument subjects is the list of normal user, serviceaccount, or group that this rule cares about. There must be at least one member in this slice. A slice that includes both the system:authenticated and system:unauthenticated user groups matches every request. Required.
     */
    @JvmName("futheurpwblrmcxu")
    public suspend fun subjects(argument: suspend SubjectArgsBuilder.() -> Unit) {
        val toBeMapped = listOf(SubjectArgsBuilder().applySuspend { argument() }.build())
        val mapped = of(toBeMapped)
        this.subjects = mapped
    }

    /**
     * @param values subjects is the list of normal user, serviceaccount, or group that this rule cares about. There must be at least one member in this slice. A slice that includes both the system:authenticated and system:unauthenticated user groups matches every request. Required.
     */
    @JvmName("wteoadktqxrqxmjo")
    public suspend fun subjects(vararg values: SubjectArgs) {
        val toBeMapped = values.toList()
        val mapped = toBeMapped.let({ args0 -> of(args0) })
        this.subjects = mapped
    }

    internal fun build(): PolicyRulesWithSubjectsArgs = PolicyRulesWithSubjectsArgs(
        nonResourceRules = nonResourceRules,
        resourceRules = resourceRules,
        subjects = subjects ?: throw PulumiNullFieldException("subjects"),
    )
}